General

  • Target

    2024-02-14_d0dd68564fb3eec6e7c8b66818f7a166_cryptolocker

  • Size

    63KB

  • MD5

    d0dd68564fb3eec6e7c8b66818f7a166

  • SHA1

    bb3bbf8f65efd5eea2c4d854b0fb7361346b3994

  • SHA256

    fcdc801f589e08b08c54103a07fedd02e556ab3c8e22da9ffad2f50c3ef8138f

  • SHA512

    58216fc41f10c1219a5579815a692d6f24ca3ae6589e2e9e60c599573d4e3494eb2d8e43cb2af2e4e21028759721a7bb870ef37adc76446a91ff939aaea8cefb

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEhhaUlPINK:6j+1NMOtEvwDpjr8ox8UDEpuha8PINK

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_d0dd68564fb3eec6e7c8b66818f7a166_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections